{"id":13713,"date":"2025-08-27T09:34:58","date_gmt":"2025-08-27T06:34:58","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=13713"},"modified":"2025-08-27T09:34:58","modified_gmt":"2025-08-27T06:34:58","slug":"perfektblue-bluetooth-car-hack","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/perfektblue-bluetooth-car-hack\/13713\/","title":{"rendered":"Bluetooth kullanarak araba hackleme"},"content":{"rendered":"<p>G\u00fcn\u00fcm\u00fcz\u00fcn arabalar\u0131, tekerlekli bilgisayarlar gibidir ve bu da onlar\u0131 siber su\u00e7lular\u0131n hedefi haline getirir; <a href=\"https:\/\/www.cnbc.com\/2022\/09\/08\/tiktok-challenge-spurs-rise-in-thefts-of-kia-hyundai-cars.html\" target=\"_blank\" rel=\"nofollow noopener\">h\u0131rs\u0131zl\u0131k<\/a>, <a href=\"https:\/\/www.kaspersky.com\/blog\/car-hacking-rsac-2016\/11551\/\" target=\"_blank\" rel=\"noopener nofollow\">ara\u00e7 i\u00e7i ekipmanlar\u0131n izinsiz etkinle\u015ftirilmesi<\/a><a href=\"https:\/\/www.kaspersky.com.tr\/blog\/jeep-hacked-again\/2349\/\" target=\"_blank\" rel=\"noopener\">, uzaktan fren ve direksiyon kontrol\u00fc<\/a> ve <a href=\"https:\/\/www.kaspersky.com.tr\/blog\/tracking-and-hacking-kia-cars-via-internet\/12916\/\" target=\"_blank\" rel=\"noopener\">s\u00fcr\u00fcc\u00fc ve yolcular\u0131n izlenmesi<\/a>, k\u00f6t\u00fc niyetli ki\u015filer taraf\u0131ndan kolayl\u0131kla ger\u00e7ekle\u015ftirilebilir. Ancak bu t\u00fcr sald\u0131r\u0131lar\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in genellikle araca fiziksel eri\u015fim veya telematik sistemlerine uzaktan eri\u015fim (yani, h\u00fccresel a\u011f \u00fczerinden otomobil \u00fcreticisinin sunucusuyla olan ileti\u015fimi ele ge\u00e7irmek) gerekir. Ancak, PCA Cyber Security taraf\u0131ndan yap\u0131lan son bir <a href=\"https:\/\/perfektblue.pcacybersecurity.com\/\" target=\"_blank\" rel=\"nofollow noopener\">ara\u015ft\u0131rma<\/a>, Bluetooth arac\u0131l\u0131\u011f\u0131yla arac\u0131n bilgi-e\u011flence sistemini hedef alan yeni bir hackleme y\u00f6ntemini anlat\u0131yor. S\u00f6z konusu d\u00f6rt g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n \u2013 topluca PerfektBlue olarak adland\u0131r\u0131l\u0131yor \u2013 yayg\u0131n araba h\u0131rs\u0131zl\u0131klar\u0131na veya hacklemelere yol a\u00e7mas\u0131 olas\u0131 de\u011fildir, ancak yine de bunlar\u0131 bilmek ve dikkatli olmakta fayda vard\u0131r.<\/p>\n<h2>PerfektBlue\u2019nun perde arkas\u0131<\/h2>\n<p>Arac\u0131n\u0131z son 10 y\u0131l i\u00e7inde \u00fcretilmi\u015fse, \u015f\u00fcphesiz Bluetooth ile ak\u0131ll\u0131 telefonunuzu ba\u011flayarak eller serbest arama yapabilir veya m\u00fczik dinleyebilirsiniz. Bilgi-e\u011flence sistemi, ana \u00fcnitenin bir par\u00e7as\u0131d\u0131r ve \u00e7al\u0131\u015fmak i\u00e7in yerle\u015fik bir Bluetooth \u00e7ipi ve \u00f6zel bir yaz\u0131l\u0131m kullan\u0131r. Bir\u00e7ok otomobil \u00fcreticisinin tercih etti\u011fi yaz\u0131l\u0131m OpenSynergy Blue SDK\u2019d\u0131r. Geli\u015ftiricilerine g\u00f6re, Blue SDK; Ford, Mercedes-Benz, Skoda, Volkswagen ve di\u011ferleri taraf\u0131ndan \u00fcretilen 350 milyon ara\u00e7ta kullan\u0131lmaktad\u0131r.<\/p>\n<p>PCA Cyber Security, Blue SDK\u2019da (CVE-2024-45431, CVE-2024-45432, CVE-2024-45433, CVE-2024-45434) d\u00f6rt g\u00fcvenlik a\u00e7\u0131\u011f\u0131 ke\u015ffetti. Bu g\u00fcvenlik a\u00e7\u0131klar\u0131 birlikte kullan\u0131ld\u0131\u011f\u0131nda, sald\u0131rganlar\u0131n sistemde k\u00f6t\u00fc ama\u00e7l\u0131 kod \u00e7al\u0131\u015ft\u0131rmas\u0131na olanak tan\u0131yabilir. Bunu yapmak i\u00e7in, Bluetooth arac\u0131l\u0131\u011f\u0131yla araca ba\u011flanmalar\u0131 gerekir, yani bir cihaz\u0131 e\u015fle\u015ftirmeleri gerekir. Ba\u015far\u0131l\u0131 olursa, sald\u0131rgan Bluetooth i\u00e7in Ses\/Video Uzaktan Kumanda Profili (AVCRP) kullanarak araca k\u00f6t\u00fc ama\u00e7l\u0131 komutlar g\u00f6nderebilir. Bu, ana \u00fcnitenin i\u015fletim sisteminde bir hataya neden olur ve hackera otomobil \u00fcreticisinin yaz\u0131l\u0131m\u0131yla ayn\u0131 Bluetooth izinlerini verir. Bu izinlerle donanm\u0131\u015f sald\u0131rgan, teorik olarak arac\u0131n konumunu takip edebilir, arac\u0131n yerle\u015fik mikrofonlar\u0131 arac\u0131l\u0131\u011f\u0131yla dinleme yapabilir ve kurban\u0131n adres defteri gibi verileri ana \u00fcniteden \u00e7alabilir. Arac\u0131n dijital mimarisine ba\u011fl\u0131 olarak, elektronik kontrol \u00fcniteleri (ECU\u2019lar) aras\u0131ndaki ileti\u015fim i\u00e7in kullan\u0131lan CAN veriyolu tehlikeye girebilir ve bu da bir sald\u0131rgan\u0131n frenleme gibi temel i\u015flevleri ele ge\u00e7irmesine olanak tan\u0131yabilir.<\/p>\n<h2>PerfektBlue ile ilgili pratik sorular<\/h2>\n<p><strong>Bu sald\u0131r\u0131y\u0131 nas\u0131l tespit edebilir ve \u00f6nleyebilirsiniz?<\/strong> Bu, Bluetooth\u2019un arac\u0131n\u0131zda nas\u0131l uyguland\u0131\u011f\u0131na ba\u011fl\u0131d\u0131r. Ara\u00e7 i\u00e7i bilgi-e\u011flence sistemi nadiren de olsa s\u00fcr\u00fcc\u00fc\/yolcu onay\u0131 gerektirmeyebilir ve Bluetooth \u00fc\u00e7\u00fcnc\u00fc taraf ba\u011flant\u0131lara a\u00e7\u0131k kalabilir. E\u011fer \u00f6yleyse, sald\u0131r\u0131y\u0131 durdurman\u0131n bir yolu yoktur. Ancak \u00e7o\u011fu ara\u00e7, s\u00fcr\u00fcc\u00fcn\u00fcn yeni bir cihaza ba\u011fland\u0131\u011f\u0131n\u0131 onaylamas\u0131n\u0131 gerektirir, bu nedenle s\u00fcr\u00fcc\u00fc beklenmedik bir ba\u011flant\u0131 iste\u011fi g\u00f6r\u00fcr ve iste\u011fi reddederse, sald\u0131r\u0131 ba\u015far\u0131s\u0131z olur. S\u00fcr\u00fcc\u00fc ayarlarda e\u015fle\u015ftirme modunu a\u00e7\u0131k\u00e7a etkinle\u015ftirmediyse, ara\u00e7 ba\u011flant\u0131y\u0131 otomatik olarak reddedebilir. Bu durum sizin arac\u0131n\u0131z i\u00e7in de ge\u00e7erliyse, sald\u0131rganlar\u0131n i\u015fleri zor olacak demektir.<\/p>\n<p><strong>Arac\u0131n\u0131z\u0131n savunmas\u0131z olup olmad\u0131\u011f\u0131n\u0131 nas\u0131l belirleyebilirsiniz? <\/strong>Ne yaz\u0131k ki, \u00fcreticiler ara\u00e7 bile\u015fenleri hakk\u0131nda bilgi vermeyi pek sevmezler, hatta kullan\u0131lan yaz\u0131l\u0131mlar hakk\u0131nda bilgi vermeleri s\u00f6z konusu bile de\u011fildir. Bu nedenle, tek g\u00fcvenilir yol, markal\u0131 bir bayi veya uzman bir ara\u00e7 servisine ba\u015fvurarak ana \u00fcniteyi kontrol ettirmek ve g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 ortadan kald\u0131ran yeni bir yaz\u0131l\u0131m g\u00fcncellemesi olup olmad\u0131\u011f\u0131n\u0131 \u00f6\u011frenmektir. Ara\u015ft\u0131rmac\u0131lar, Volkswagen ID.4 (bilgi-e\u011flence sistemi: MEB ICAS3), Mercedes-Benz (NTG6) ve Skoda Superb (MIB3) ara\u00e7lar\u0131n ana \u00fcnitelerinde deneyler yapt\u0131lar (ve g\u00fcvenlik a\u00e7\u0131klar\u0131ndan ba\u015far\u0131yla yararland\u0131lar).<\/p>\n<p><strong>Arac\u0131n\u0131z\u0131 ve kendinizi nas\u0131l koruyabilirsiniz?<\/strong> En iyi tavsiye, ana \u00fcnitenin yaz\u0131l\u0131m\u0131n\u0131 yamalanm\u0131\u015f bir s\u00fcr\u00fcme g\u00fcncellemenizdir. OpenSynergy, <a href=\"https:\/\/www.opensynergy.com\/perfektblue\/\" target=\"_blank\" rel=\"nofollow noopener\">Eyl\u00fcl 2024\u2019te yaz\u0131l\u0131m g\u00fcncellemelerini yay\u0131nlam\u0131\u015f olsa da<\/a>, bu g\u00fcncellemelerin \u00f6nce ana \u00fcnite \u00fcreticisi taraf\u0131ndan, ard\u0131ndan da otomobil \u00fcreticisi taraf\u0131ndan uygulanmas\u0131 gerekmektedir. \u0130kincisi, yeni yaz\u0131l\u0131m\u0131 bayi a\u011f\u0131na da da\u011f\u0131tmal\u0131d\u0131r. Bu nedenle, g\u00fcvenlik a\u00e7\u0131\u011f\u0131 bulunan baz\u0131 ara\u00e7larda yeni yaz\u0131l\u0131m hala eksik olabilir.<\/p>\n<p>\u0130kinci g\u00fcvenilir koruma y\u00f6ntemi, ara\u00e7taki Bluetooth\u2019u devre d\u0131\u015f\u0131 b\u0131rakmakt\u0131r.<\/p>\n<p><strong>Sald\u0131r\u0131 menzili nedir?<\/strong> Standart Bluetooth donan\u0131m\u0131yla sald\u0131r\u0131 menzili 10 metre ile s\u0131n\u0131rl\u0131d\u0131r, ancak \u00f6zel amplifikat\u00f6rler (menzil geni\u015fleticiler) bu menzili 50-100 metreye kadar uzatabilir. Bir ara\u00e7 4G h\u00fccresel a\u011f teknolojisiyle donat\u0131lm\u0131\u015fsa, Bluetooth gerektiren sald\u0131r\u0131n\u0131n ilk a\u015famas\u0131ndan sonra, tehdit akt\u00f6rleri teorik olarak h\u00fccresel a\u011f \u00fczerinden ara\u00e7 \u00fczerinde kontrol\u00fcn\u00fc s\u00fcrd\u00fcrebilir.<\/p>\n<p><strong>Sald\u0131r\u0131n\u0131n i\u015fe yaramas\u0131 i\u00e7in motorun \u00e7al\u0131\u015f\u0131yor olmas\u0131 gerekti\u011fi do\u011fru mudur?<\/strong> Bu s\u0131n\u0131rlama Volkswagen taraf\u0131ndan bildirilmi\u015ftir, ancak pratikte neredeyse t\u00fcm ara\u00e7larda kontak kapal\u0131yken Bluetooth ile bilgi-e\u011flence sistemini a\u00e7abilirsiniz. Bu nedenle, \u00e7al\u0131\u015fan motor bir sald\u0131r\u0131 \u00f6n ko\u015fulu de\u011fildir.<\/p>\n<p><strong>Otomobil \u00fcreticileri bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 korumay\u0131 iyile\u015ftirmek i\u00e7in ne yapmal\u0131d\u0131r?<\/strong> Otomobil \u00fcreticileri, Tasar\u0131mda G\u00fcvenlik yakla\u015f\u0131m\u0131n\u0131 benimsemelidir. Kaspersky, ana \u00fcnite ve otomotiv elektroni\u011fi \u00fcreticileriyle birlikte, savunmas\u0131z bir bile\u015fen sald\u0131r\u0131ya u\u011frad\u0131\u011f\u0131nda bile sistemi koruyan ve \u00e7al\u0131\u015fmaya devam ettiren <a href=\"https:\/\/os.kaspersky.com\/blog\/how-cyber-immunity-will-change-the-auto-industry\/\" target=\"_blank\" rel=\"noopener nofollow\">KasperskyOS tabanl\u0131 bir Cyber Immune \u00e7\u00f6z\u00fcmleri serisi<\/a> olu\u015fturuyor. Ancak otomotiv end\u00fcstrisindeki uzun geli\u015ftirme ve test d\u00f6ng\u00fcleri g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, Siber Ba\u011f\u0131\u015f\u0131kl\u0131k \u00f6zelli\u011fine sahip otomobillerin yollara \u00e7\u0131kmas\u0131 i\u00e7in birka\u00e7 y\u0131l daha ge\u00e7mesi gerekecek.<\/p>\n<blockquote><p>Elektronik sistemlerdeki g\u00fcvenlik a\u00e7\u0131klar\u0131ndan yararlanarak ger\u00e7ekle\u015ftirilen araba hackleme vakalar\u0131na ili\u015fkin daha fazla \u00f6rnek:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.kaspersky.com.tr\/blog\/vw-hack\/2356\/\" target=\"_blank\" rel=\"noopener\"><strong>Evrensel Volkswagen anahtar\u0131, sadece 40$<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/www.kaspersky.com.tr\/blog\/jeep-hacked-again\/2349\/\" target=\"_blank\" rel=\"noopener\"><strong>Jeep nas\u0131l hacklendi. \u0130kinci kere.<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/www.kaspersky.com\/blog\/hacking-smart-car-alarm-systems\/26014\/\" target=\"_blank\" rel=\"noopener nofollow\"><strong>Ak\u0131ll\u0131 araba alarm sistemlerini hacklemek<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/www.kaspersky.com\/blog\/hacking-tesla-model-x\/17874\/\" target=\"_blank\" rel=\"noopener nofollow\"><strong>Tesla hacklemeleri<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/www.kaspersky.com\/blog\/blackhat-jeep-cherokee-hack-explained\/9493\/\" target=\"_blank\" rel=\"noopener nofollow\"><strong>Black Hat USA 2015: Jeep\u2019in hacklenmesinin t\u00fcm hikayesi<\/strong><\/a><\/li>\n<\/ul>\n<\/blockquote>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"premium-geek\">\n","protected":false},"excerpt":{"rendered":"<p>Ara\u00e7 i\u00e7i bilgi-e\u011flence sisteminize ba\u011flad\u0131\u011f\u0131n\u0131z cihazlara dikkat edin.<\/p>\n","protected":false},"author":2722,"featured_media":13714,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1351],"tags":[970,2801,2690,500,790,545,1945,2675],"class_list":{"0":"post-13713","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-arabalar","9":"tag-baglantili-cihazlar","10":"tag-bluetooth","11":"tag-gizlilik","12":"tag-guvenlik-aciklari","13":"tag-hack","14":"tag-hackleme","15":"tag-otomobiller"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/perfektblue-bluetooth-car-hack\/13713\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/perfektblue-bluetooth-car-hack\/29457\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/perfektblue-bluetooth-car-hack\/24565\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/perfektblue-bluetooth-car-hack\/12742\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/perfektblue-bluetooth-car-hack\/29398\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/perfektblue-bluetooth-car-hack\/28480\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/perfektblue-bluetooth-car-hack\/31340\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/perfektblue-bluetooth-car-hack\/29993\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/perfektblue-bluetooth-car-hack\/40315\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/perfektblue-bluetooth-car-hack\/54159\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/perfektblue-bluetooth-car-hack\/23110\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/perfektblue-bluetooth-car-hack-2\/24166\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/perfektblue-bluetooth-car-hack\/32596\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/perfektblue-bluetooth-car-hack\/29585\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/perfektblue-bluetooth-car-hack\/35328\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/perfektblue-bluetooth-car-hack\/34960\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/arabalar\/","name":"arabalar"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/13713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/2722"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=13713"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/13713\/revisions"}],"predecessor-version":[{"id":13716,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/13713\/revisions\/13716"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/13714"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=13713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=13713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=13713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}